I am setting up my react webapplication (which authenticates using cognito) to use okta as a federated identity. However, I am struggling to understand some of the process. I don't understand how user association with okta works. I see the consoles - people create an okta account and put the relevant information to associate the two applications. But how does Okta know who is logging in and what credentials to supply to them, or is that handled via cognito? My initial understanding was as follows
- a User signs up using cognito's regular process
- an admin must manually add a user to the okta user list?
- the user can now sign in using okta
- this means okta authenticates them and tells cognito they are authenticated
- cognito now delivers what? how does it know who logged in using the okta? how does it know who to authenticate?
Many thanks